079cc7d18d1c50a614ff1cda366fcdf9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

079cc7d18d1c50a614ff1cda366fcdf9_JaffaCakes118
Size

308KB
MD5

079cc7d18d1c50a614ff1cda366fcdf9
SHA1

6bad2034b164dbf04bc6b93174eb9fe54106f6e8
SHA256

a9ca0f87d5456ac07b3edcd01b5c52e2b5776450b4ec358b03e3a56ecc916b2f
SHA512

0696c2a7c81ce700132da25fa1accdd689eab72ca571351e70a7e1f0ee723edc2a9d57b1c14d47e7a9e08b1ea33e8dd92926213d6e9738f974895f9adc6a4b57
SSDEEP

6144:0DMX+pvGx2C88LaRsy2pXVBiCkRWIvlF0e9vGdn7XJLBqNpka:uIxlx0sZRyCh00eNGV7XJLBMR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
079cc7d18d1c50a614ff1cda366fcdf9_JaffaCakes118

Files

079cc7d18d1c50a614ff1cda366fcdf9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 291KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ